Privacy
Privacy policy
The short version: we hold what the product needs to work, and nothing to sell.
What we hold
- Your account — email address, the name you chose, and a hash of your password. The password itself is never stored and cannot be recovered from the hash.
- Your activity — pitches sent, reviews written, credits moved, payouts requested. This is the product; without it there is nothing to show you.
- Your playlist, if you curate — its link, name, genres and follower count, and the Spotify account id that proved you own it.
- Push subscriptions, if you turn notifications on — the address your browser's push service gave us, and which account it belongs to.
What we do not hold
- Card numbers. Payment happens on Stripe's own pages; we never see a card.
- Bank details. A payout destination is free text — a PayPal address or similar — because holding account numbers would make this a place worth breaking into.
- Your Spotify password. Connecting Spotify uses their sign-in, and we keep only a token that lets us read the playlist you nominated.
- Anything for advertising. There are no third-party trackers, no analytics scripts and no advertising pixels on this site.
Who else sees it
Three services, each doing one job: Netlify hosts the site and stores the data; Stripe takes payments; Spotify is read, not written to. No data is sold, and none is shared with anyone else.
A curator reviewing your pitch sees the track and what you typed about it — not your email address. An artist reading a review sees the playlist's name, not the curator's address.
How long
While your account exists. Closing it removes the account and its credit ledger; reviews already written stay, because they are part of somebody else's history too — the artist who paid for them.
Your choices
Ask us for a copy of what we hold about you, for a correction, or for deletion, and we will do it. Notifications are off until you turn them on and can be turned off in your browser at any time.
Cookies
One, and it is the thing that keeps you signed in. It is set when you sign in, cleared when you sign out, and it is not used to follow you anywhere.
Ask anything: support@koalaqueue.com.